Privacy policy

What we collect

We only collect what the service needs. Nothing is sold, and nothing is used for advertising other than your own alert.

• Your email address: the only contact detail we ask for. It is never shown publicly. We use it to send you the search kit, sightings and matches, to give you access to your dashboard and to answer your messages.
• Listing details: pet name, species, photos, description, the status of the listing (lost, found, adoption) and the date you posted.
• Location: the point you mark on the map or the address you search for. It appears on the public listing and on the live map so that people nearby can recognise the pet.
• Sightings and messages sent by other people through the listing page or under our social media posts. The name of the person who commented stays in your dashboard only and is not shown publicly.
• Payments: for a paid alert or a donation we keep the amount, the currency, the date and the Stripe reference. We never see or store your card number.
• Technical data: IP address, browser type, pages visited and timestamps, in server logs and, if enabled, in anonymised analytics.

Why we use it and on what legal basis

• To publish and distribute your listing and to run the search you asked for (performance of a contract, GDPR art. 6(1)(b)).
• To send you sightings, matches, confirmations and the search kit by email (performance of a contract).
• To review listings and comments for fraud, abuse and mistakes, including with automated tools (legitimate interest, art. 6(1)(f)).
• To keep the service secure and understand how it is used (legitimate interest).
• To issue receipts and keep accounting records (legal obligation, art. 6(1)(c)).
• Optional analytics cookies, if we ask for them, are used only with your consent (art. 6(1)(a)).

What is public

A listing is public by design: that is how a pet gets found. Pet name, photos, description, status and the marked area are visible on the listing page, on the live map, in the printable poster and, if you choose a paid alert, in our social media post and ads.

Your email address, your name, the sightings you receive and the identity of people who write to you are never public.

Who we share data with

We work with a small number of providers that process data on our behalf, under contracts that follow the GDPR:

• Stripe: payment processing for alerts and donations. Stripe collects your card details directly on its secure checkout page.
• Resend: delivery of transactional emails (search kit, sightings, receipts).
• Meta (Facebook and Instagram): only when you buy a paid alert. The listing content and photo are published on our page and promoted as an ad to people in the radius you chose. Comments left under that post are read by us to turn them into sightings for you.
• OpenAI: automated review of listing text and photos and classification of comments, to catch fraud and mistakes quickly. No email address is sent.
• Photon (komoot) for address search and OpenFreeMap / OpenStreetMap for map tiles: the address you type and your IP address reach these services when the map is used.
• Google Analytics 4, only if enabled and only after your consent, for anonymised usage statistics.
• Our hosting provider, on servers located in the European Union.

Cookies and local storage

• A session cookie is set after you post a listing. It is signed, HttpOnly and lets you into your dashboard from the same browser. It is strictly necessary and needs no consent.
• The listing draft is saved in your browser's session storage while you fill in the form, so that a refresh does not lose your answers. It is deleted when the listing is published.
• Stripe sets its own cookies on the checkout page for fraud prevention.
• Analytics cookies are used only if we ask for your consent and you accept.

How long we keep data

• Listings stay online until you mark them as resolved or ask us to remove them. Resolved listings may remain visible as success stories unless you ask for deletion.
• Your email and dashboard data are kept while the listing exists and for 12 months after, then deleted.
• Payment records are kept for 10 years, as required by Romanian accounting law.
• Server logs are kept for up to 12 months.

Your rights

Under the GDPR you can ask us to access, correct, delete or export your data, to restrict or object to processing, and you can withdraw consent at any time. Write to contact@reunika.com and we answer within 30 days. You can also complain to the Romanian supervisory authority (ANSPDCP, dataprotection.ro) or to the authority in your country.

Children

The service is meant for adults. If you are under 18, ask a parent or guardian to post the listing.

Changes

When this policy changes, we update the date at the top of the page. Substantial changes are announced by email to people with an active listing.